Consider a table with columns and 'customer _ region'. You want to implement both a Row Access Policy (RAP) and an Aggregation Policy on this table. The RAP should restrict access to orders based on the user's region, defined in a session variable 'CURRENT REGION'. Users should only see orders from their region. The Aggregation Policy should mask order totals for regions other than the user's region when aggregating data'. In other words if someone attempts to aggregate ALL region's totals, the aggregation will only include their region. Which statements about implementing this scenario are true?
Correct Answer: C,D
Option C is correct. ' IS ROLE IN can be used in both policy types for role-based access control. Option D is correct because using external functions can lead to performance problems. Option A is incorrect because the Aggregation Policy's main purpose here is to mask data, so it isn't for filtering the data, it operates based on the results of the RAP. Option B is incorrect as RAP policy applies before AGGREGATION policy. Option E is partially incorrect; session variables are referenced as CURRENT_REGION, CURRENT_USER and no UDF is needed.